CISA Adds Apple CVE-2024-27834 to KEV After APT29 Phone Attacks
November 5, 2026
CISA added Apple’s CVE-2024-27834 to its KEV catalog after Sekoia tied watering-hole attacks on iPhones and Android phones to Russia’s
Cybersecurity
CISA Adds Apple CVE-2024-27834 to KEV After APT29 Phone Attacks
CISA added Apple's CVE-2024-27834 to its KEV catalog after Sekoia tied watering-hole attacks on iPhones and Android phones to Russia's APT29 hacking group.
Debian, Ubuntu Patch Critical APT Flaw CVE-2026-109518
Debian and Ubuntu patched CVE-2026-109518, a critical APT flaw that lets a network attacker swap a verified package for malicious code that installs as root.
Credit Mutuel Arkea Confirms Attack Tied to $133M Bank Theft
Credit Mutuel Arkea confirmed a sophisticated supplier-linked attack after ZachXBT reported more than $133 million stolen, saying customer accounts are safe.
Xen Flaws CVE-2026-102703, CVE-2026-102704 Break VM Isolation
Xen advisory XSA-523 covers two grant copy flaws that let a malicious guest read and write any other VM's memory, including dom0, with no known ...
GPUStack Auth Bypass CVE-2026-102895 Exploited on AI Servers
Attackers are exploiting GPUStack CVE-2026-102895, a CVSS 9.8 authentication bypass that grants admin access and lets them run reverse shells on AI servers.
Ten Control Web Panel Flaws Chain Into Root RCE; PoC Public
VulnCheck disclosed ten Control Web Panel flaws that chain into unauthenticated root code execution, with a public exploit module and fixes in version 1.29.
Cisco Patches UCS Central Flaw CVE-2026-76506 and ISE Bugs
Cisco patched UCS Central flaw CVE-2026-76506, an ISE certificate authorization bypass and a Unified CM XSS bug. No workarounds exist and no attacks are known.
Citrix Fixes CVSS 9.8 XenServer Flaw and Brotli Bug in Scout
Citrix patched a CVSS 9.8 XenServer race condition, CVE-2026-98432, plus pre-boot and Brotli decoder flaws. The company reports no attacks against customers.
NIKKE PC Launcher Scripts Tampered to Spread K2F Malware
Attackers tampered with Goddess of Victory: NIKKE PC launcher scripts on an official CDN to install the K2F remote-access agent and a wallet-stealing DLL.
Kyiv Independent Hit by Cyberattack Sending Fake Nuclear Emails
Hackers breached The Kyiv Independent's website and newsletter service, emailing subscribers false claims of a nuclear strike, in a suspected Russian attack.
Debian, Ubuntu Patch Critical APT Flaw CVE-2026-109518
November 5, 2026
Debian and Ubuntu patched CVE-2026-109518, a critical APT flaw that lets a network attacker swap a verified package for malicious
Credit Mutuel Arkea Confirms Attack Tied to $133M Bank Theft
November 5, 2026
Credit Mutuel Arkea confirmed a sophisticated supplier-linked attack after ZachXBT reported more than $133 million stolen, saying customer accounts are
Xen Flaws CVE-2026-102703, CVE-2026-102704 Break VM Isolation
November 5, 2026
Xen advisory XSA-523 covers two grant copy flaws that let a malicious guest read and write any other VM’s memory,
GPUStack Auth Bypass CVE-2026-102895 Exploited on AI Servers
November 5, 2026
Attackers are exploiting GPUStack CVE-2026-102895, a CVSS 9.8 authentication bypass that grants admin access and lets them run reverse shells
Ten Control Web Panel Flaws Chain Into Root RCE; PoC Public
November 5, 2026
VulnCheck disclosed ten Control Web Panel flaws that chain into unauthenticated root code execution, with a public exploit module and
Cisco Patches UCS Central Flaw CVE-2026-76506 and ISE Bugs
November 5, 2026
Cisco patched UCS Central flaw CVE-2026-76506, an ISE certificate authorization bypass and a Unified CM XSS bug. No workarounds exist
Citrix Fixes CVSS 9.8 XenServer Flaw and Brotli Bug in Scout
November 5, 2026
Citrix patched a CVSS 9.8 XenServer race condition, CVE-2026-98432, plus pre-boot and Brotli decoder flaws. The company reports no attacks
NIKKE PC Launcher Scripts Tampered to Spread K2F Malware
November 5, 2026
Attackers tampered with Goddess of Victory: NIKKE PC launcher scripts on an official CDN to install the K2F remote-access agent
Kyiv Independent Hit by Cyberattack Sending Fake Nuclear Emails
November 5, 2026
Hackers breached The Kyiv Independent’s website and newsletter service, emailing subscribers false claims of a nuclear strike, in a suspected
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.